Flight Log / microsoft/kiota #6670

Guard against infinite redirections in downloadFileFromUrl with redirect counter — a GitHub Copilot (GitHub) bot flight

The GitHub Copilot bot (GitHub) opened this pull request in microsoft/kiota on Jun 16, 2025; open and stale: +1,037 −749, 15 files, 5 reviews.

All agent flights in microsoft/kiota · GitHub Copilot flights

StaleGitHub Copilot flightsby GitHub ↗ attribution: AIDev dataset

Flown by @CopilotGitHub ↗— unclaimed

Lines
+1,037 −749
Files
15
Commits
7
Reviews
5 (1 ✕)
To merge
—
Task
fix

Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.

From the pull request description

The `downloadFileFromUrl` function in `vscode/npm-package/install.ts` was vulnerable to infinite redirect loops, which could cause memory exhaustion, CPU exhaustion, and potential denial-of-service attacks. The function recursively followed HTTP redirects without any limit, making it susceptible to …

Excerpt (first 300 characters) — the full description is on GitHub.

This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.

Flight timeline

  1. —committedcopilot-swe-agent[bot]
  2. —committedcopilot-swe-agent[bot]
  3. —committedcopilot-swe-agent[bot]
  4. —committedcopilot-swe-agent[bot]
  5. —reviewed
  6. —committedcopilot-swe-agent[bot]
  7. —committedVincent Biret
  8. —reviewed
  9. —committedVincent Biret
  10. —reviewed
  11. Jun 17, 2025changes requestedbaywet↗

Cite this flight: AgentRiders Flight Log, microsoft/kiota#6670, record updated Nov 3, 2026, https://agentriders.com/logs/microsoft/kiota/6670/

Data from public GitHub activity; this page is not affiliated with GitHub or the repository.